Information Security Consultant

Jobtailor; Lübeck; Vor Ort; EUR 60.000 - 80.000; Vollzeit

Zusammenfassung

Jobtailor is seeking an experienced ISMS/GRC professional in Lübeck to maintain ISMS policies, integrate regulatory requirements, and lead audits. You will advise departments on compliant process design and independently plan audits, producing detailed reports and management-ready findings.

The role requires strong German and English skills, experience with risk assessments, and hands-on use of GRC systems and security awareness platforms.

Qualifikationen

• Completed degree in IT security, CS, or business informatics
• Alternatively, equivalent qualification with several years of professional experience
• Experience developing and maintaining an ISMS per ISO/IEC 27001
• Experience planning and conducting audits independently
• Experience with risk assessments
• Experience with GRC systems and security awareness platforms
• Strong German and English skills

Aufgaben

• Maintain and update ISMS policies
• Integrate new regulatory requirements
• Advise departments on compliant process design
• Independently plan and conduct audits
• Prepare audit reports
• Prepare findings for annual management review
• Define and monitor corrective actions
• Optimize the GRC system
• Develop the Internal Control System (ICS)
• Plan training for security awareness
• Provide admin support for the security awareness platform
• Analyze KPIs statistically
• Map department processes in the GRC system
• Support Risk Owners in risk analyses
• Collaborate with CISO to strengthen information security

Kenntnisse

ISMS maintenance

ISO 27001

Audit planning

Risk assessment

GRC systems

Security awareness

German-English

Ausbildung

IT security degree

Business informatics degree

Equivalent qualification

Tools

GRC platforms

Security awareness platforms

Jobbeschreibung

• Maintain and continuously update all ISMS policies


• Integrate new regulatory requirements


• Advise business departments on process design in compliance with applicable standards


• Independently plan and conduct audits


• Prepare detailed audit reports


• Prepare audit findings for the annual management review


• Define and monitor corrective actions


• Continuously optimize the GRC system


• Contribute to the development of the Internal Control System (ICS)


• Plan training activities strategically


• Provide administrative and content-related support for the security awareness platform


• Analyze key performance indicators statistically


• Capture and map department-specific processes in the GRC system


• Support Risk Owners in conducting systematic risk analyses


• Collaborate with business departments and the CISO to strengthen information security and further develop the security culture

Requirements

• Completed university degree, for example in IT security, computer science, or business informatics


• Alternatively, an equivalent qualification combined with several years of professional experience


• Experience developing and maintaining an ISMS in accordance with ISO/IEC 27001


• Relevant certifications are a plus


• Experience independently planning and conducting audits


• Experience with risk assessments


• Experience tracking corrective actions


• Practical experience with GRC systems


• Practical experience with security awareness platforms


• Very good German and English skills


• Team-oriented, pragmatic, structured, communicative, and self-motivated approach to work

Core Competencies

Demonstrates expertise in maintaining ISMS policies and integrating regulatory requirements, with a strong focus on conducting audits and optimizing GRC systems. Proficient in risk assessment and security awareness training, complemented by excellent communication skills in both German and English.

Highest-signal resume keywords

• ISMS Development and Maintenance


• ISO/IEC 27001 Compliance


• Audit Planning and Execution


• GRC System Optimization


• Risk Assessment Experience

Hard Skills

• ISMS Policies


• Audit Reporting


• Corrective Action Tracking


• Risk Analysis


• Process Design Compliance

Soft Skills

• Team-Oriented


• Pragmatic


• Structured


• Communicative


• Self-Motivated

Certifications & Qualifications

• Relevant Certifications

Industry Keywords

• Internal Control System


• Key Performance Indicators


• Regulatory Requirements


• Information Security


• Security Culture

Tools & Technologies

• GRC Systems


• Security Awareness Platforms